$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer (raw, json) Hash identifier: uCFfmKPcf1eR1Lm/piY8woU5LmowwEoFQslFisKHzwE= Subject key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7AC3341A9DD92EA8FF8D9E70984AAD9DE9989A20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft caRepository: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Aug 2025 20:30:55 +0000 Certificate not after: Wed 26 Aug 2026 20:35:55 +0000 Subordinate resources: IP: 160.187.55.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c3:34:1a:9d:d9:2e:a8:ff:8d:9e:70:98:4a:ad:9d:e9:98:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 27 20:30:55 2025 GMT Not After : Aug 26 20:35:55 2026 GMT Subject: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:33:0f:c9:a9:f3:5b:75:ab:eb:a6:28:c0: f5:2c:42:5b:05:a3:80:fd:00:90:a0:d0:95:26:02: 0c:32:8e:12:27:49:37:62:4f:b5:64:2b:25:50:26: ee:9f:39:aa:4b:c7:fd:03:75:d2:dd:90:10:5a:c0: 9a:57:38:22:ab:08:0f:5c:f1:1e:e7:2f:e9:74:fe: ba:30:b4:c5:40:18:20:77:5a:a5:83:5c:e4:e1:d6: 8c:d7:3c:3e:25:08:0c:21:80:38:41:21:7b:0b:34: 4f:ed:71:64:7d:89:42:09:5a:5a:31:3e:c2:33:5d: 0e:98:17:70:27:79:7e:f9:1f:27:e7:50:54:1c:9d: c9:e9:8d:5c:49:3a:80:64:cd:fe:f8:6e:fa:8a:1e: 16:88:60:25:1e:bf:09:c4:e7:12:5f:c1:da:a0:09: d1:62:3a:82:b8:2d:1d:12:17:69:fa:c0:bb:19:17: 92:fa:33:2a:62:ec:9c:81:5d:55:52:e7:61:d1:e5: b0:bf:9e:55:8e:c1:99:f7:c0:cc:02:51:53:76:ab: 58:07:23:43:33:20:83:db:e6:50:63:9b:d6:db:e8: 66:c0:38:a2:c5:8c:c5:5c:b2:6c:89:6c:37:f5:fc: ad:5d:08:e7:8d:bc:e6:de:81:04:cc:e4:e8:f2:66: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:1f:fc:cc:49:62:05:1d:82:a5:df:3e:fa:34:91:ae:3c:60: 56:a2:23:b7:f3:1a:d6:61:be:98:e5:f9:55:c9:ac:b8:1b:72: ed:dd:7a:94:93:af:82:de:c7:0e:ee:7c:d6:8e:99:6f:bd:20: 3f:6c:b1:da:e5:25:04:69:58:7a:80:5d:2c:1e:ce:fa:ea:bb: 20:d0:a2:c2:c6:a2:ef:30:54:f2:bb:08:a0:6c:32:20:7c:e8: 48:87:8d:c6:ea:00:f2:da:59:2c:82:da:6a:d3:70:c3:23:91: 23:2b:c9:eb:b1:cb:3f:2e:47:de:d8:09:0f:19:7d:fe:ba:33: 7b:12:26:2e:e4:9e:72:21:84:35:f9:c3:e0:9b:a8:96:38:d3: f3:71:a1:10:f2:39:67:f4:7f:0d:26:2a:ad:de:63:70:60:42: 63:02:79:54:b5:01:d0:ad:c8:3d:89:a5:a7:f7:ef:b8:da:8e: 5d:84:05:df:80:b7:f1:ce:03:13:c7:4e:71:a8:98:dc:77:9c: 62:76:f7:2f:9d:72:93:3f:25:cf:ff:a8:cf:66:24:d3:cc:c3: d2:51:15:1e:fc:a4:49:74:73:6d:13:15:fe:ec:b4:a2:41:fc: 5d:67:4d:5d:48:59:3c:85:4a:64:43:e7:17:54:59:05:3d:d2: 7d:c7:3c:6d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUesM0Gp3ZLqj/jZ5wmEqtnemYmiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgyNzIwMzA1NVoX DTI2MDgyNjIwMzU1NVowMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJC OERENkQxNkQ5NUE0NUI5ODFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODGMw/JqfNbdavrpijA9SxCWwWjgP0AkKDQlSYCDDKOEidJN2JPtWQrJVAm 7p85qkvH/QN10t2QEFrAmlc4IqsID1zxHucv6XT+ujC0xUAYIHdapYNc5OHWjNc8 PiUIDCGAOEEhews0T+1xZH2JQglaWjE+wjNdDpgXcCd5fvkfJ+dQVBydyemNXEk6 gGTN/vhu+ooeFohgJR6/CcTnEl/B2qAJ0WI6grgtHRIXafrAuxkXkvozKmLsnIFd VVLnYdHlsL+eVY7BmffAzAJRU3arWAcjQzMgg9vmUGOb1tvoZsA4osWMxVyybIls N/X8rV0I54285t6BBMzk6PJmPMkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7YyzPnid00IYK43W0W2VpFuYHvMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YjA3YTll LTYyZGYtNDgwOC05ZDJhLWE2ZTY4ODRiY2JiYi8wL0FFRDhDQjMzRTc4OUREMzQy MTgyQjhERDZEMTZEOTVBNDVCOTgxRUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACguzcwDQYJKoZIhvcNAQELBQADggEBAIwf/MxJYgUdgqXfPvo0ka48YFaiI7fz GtZhvpjl+VXJrLgbcu3depSTr4Lexw7ufNaOmW+9ID9ssdrlJQRpWHqAXSwezvrq uyDQosLGou8wVPK7CKBsMiB86EiHjcbqAPLaWSyC2mrTcMMjkSMryeuxyz8uR97Y CQ8Zff66M3sSJi7knnIhhDX5w+CbqJY40/NxoRDyOWf0fw0mKq3eY3BgQmMCeVS1 AdCtyD2Jpaf377jajl2EBd+At/HOAxPHTnGomNx3nGJ29y+dcpM/Jc//qM9mJNPM w9JRFR78pEl0c20TFf7stKJB/F1nTV1IWTyFSmRD5xdUWQU90n3HPG0= -----END CERTIFICATE-----Generated at Tue Nov 4 18:31:10 2025 by rpki-client